$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa File: f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa (raw, json) Hash identifier: /+LmXolxRO6oEWkjKqjqPFkRn0kGcH1/aC3xsiuc43M= Subject key identifier: 68:CB:62:68:85:0D:39:5B:4F:58:EB:74:D6:E2:26:0D:52:AF:CD:89 Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Certificate serial: 010D0C9F4328584ACB40EEE215E6BEA3F9628380 Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 2620:c3:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:ee:e2:15:e6:be:a3:f9:62:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=06e05c47-3556-48b2-b6b5-78713c1e87d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:55:25:c8:1c:b3:59:1d:7f:d2:db:a2:a5: f7:9b:5d:4b:af:a8:fb:21:f3:77:55:82:f7:b0:7c: da:f2:62:86:9d:0e:6c:d7:d6:95:2c:d8:be:2c:e8: 74:d5:ca:8d:0d:22:f8:94:a2:a7:8f:40:36:4e:a7: 4b:73:b9:09:8a:74:1e:a0:28:32:b1:27:7e:f9:cc: 81:4a:15:09:7d:3e:95:66:75:ef:f7:45:99:2d:ea: 0c:0f:0f:f0:42:58:9f:dc:8a:db:f8:86:49:f2:bf: 3a:c7:bc:7b:a8:af:4a:86:1d:97:78:92:1d:7a:14: 53:72:85:62:ec:ef:12:96:4e:fe:64:69:c0:75:24: 41:da:5b:be:a5:f3:7f:ca:50:fc:91:e5:f0:e8:d8: b4:d4:61:94:e3:ce:3b:7e:3b:64:bf:35:d3:01:77: ea:4b:4f:e6:1c:54:ed:10:94:68:3b:fc:b9:fb:83: 4c:3d:06:3a:97:75:fb:b2:6d:60:58:c8:12:9c:90: 5f:fd:7c:37:9e:c3:7d:26:06:18:4d:18:b4:6e:ad: 98:2d:d4:8e:ed:98:1a:62:ce:37:4b:0e:83:ed:88: 60:fe:5b:2c:23:fd:26:62:72:07:0c:a8:fc:df:7d: 5e:7e:9d:03:1e:66:57:71:f3:9b:b5:53:df:32:d5: ee:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:62:68:85:0D:39:5B:4F:58:EB:74:D6:E2:26:0D:52:AF:CD:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl X509v3 Authority Key Identifier: keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer sbgp-ipAddrBlock: critical IPv6: 2620:c3:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:3f:81:80:b1:92:b7:12:cc:5c:f7:8f:8c:c3:64:38:8c:e2: 7e:4f:ae:5b:8e:7f:d5:3c:18:29:a0:93:ae:76:62:a1:f9:bd: c4:fb:f5:a0:7c:19:55:04:fc:30:c7:9e:74:d1:30:03:ac:65: 6f:b0:16:cb:ed:6d:c6:aa:61:28:ba:c6:2d:95:f3:ab:45:fe: 4e:d1:5f:8d:4a:27:12:82:a9:28:f0:b1:31:99:35:83:bd:f7: 06:54:8c:1a:26:15:a4:f8:0f:e5:b0:0d:1a:7a:48:c5:cf:9d: 03:8e:ac:8b:27:02:e1:c5:f8:13:30:68:8d:4d:61:b1:1b:31: 9d:60:33:13:14:0e:fa:54:9b:91:fc:e6:f5:be:10:6f:6b:5e: 75:62:93:9a:00:e7:12:54:05:ed:d2:a8:b4:04:0b:a3:30:17: 87:01:23:19:fd:e9:23:6d:76:92:99:a6:4b:4e:ec:c4:2e:58: a0:50:81:ea:41:17:24:9b:c2:a2:8c:1a:7a:53:1a:15:2a:16: fd:60:5d:c6:61:f8:ba:e8:4c:71:db:bd:24:13:ad:43:5d:04: 7c:3d:a0:87:e8:08:47:6e:5b:f2:f7:63:df:12:0f:a0:bd:c8: b1:57:68:08:be:00:51:17:65:2c:6e:af:f1:9d:04:d8:77:57: fc:f0:e1:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErLQO7iFea+o/lig4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3 N2YwMB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDZlMDVjNDctMzU1Ni00OGIyLWI2YjUtNzg3MTNjMWU4N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxdVJcgcs1kdf9LboqX3m11Lr6j7IfN3VYL3 sHza8mKGnQ5s19aVLNi+LOh01cqNDSL4lKKnj0A2TqdLc7kJinQeoCgysSd++cyB ShUJfT6VZnXv90WZLeoMDw/wQlif3Irb+IZJ8r86x7x7qK9Khh2XeJIdehRTcoVi 7O8Slk7+ZGnAdSRB2lu+pfN/ylD8keXw6Ni01GGU4847fjtkvzXTAXfqS0/mHFTt EJRoO/y5+4NMPQY6l3X7sm1gWMgSnJBf/Xw3nsN9JgYYTRi0bq2YLdSO7ZgaYs43 Sw6D7Yhg/lssI/0mYnIHDKj8331efp0DHmZXcfObtVPfMtXuvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGjLYmiFDTlbT1jrdNbiJg1Sr82JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvZjUzM2QxNmUtZjBiMC0z YjM2LThhYWItMzJlZDViMTA3ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh YTMxMTc3ZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAw+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJw/gYCxkrcSzFz3j4zDZDiM4n5PrluOf9U8GCmgk652YqH5vcT7 9aB8GVUE/DDHnnTRMAOsZW+wFsvtbcaqYSi6xi2V86tF/k7RX41KJxKCqSjwsTGZ NYO99wZUjBomFaT4D+WwDRp6SMXPnQOOrIsnAuHF+BMwaI1NYbEbMZ1gMxMUDvpU m5H85vW+EG9rXnVik5oA5xJUBe3SqLQEC6MwF4cBIxn96SNtdpKZpktO7MQuWKBQ gepBFySbwqKMGnpTGhUqFv1gXcZh+LroTHHbvSQTrUNdBHw9oIfoCEduW/L3Y98S D6C9yLFXaAi+AFEXZSxur/GdBNh3V/zw4ck= -----END CERTIFICATE-----Generated at Sat Aug 23 08:17:38 2025 by rpki-client